Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File:                     28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier:          hlQTyIOGI9zRExH03SKznOLZMhmQCemlJH6jcvFaqjY=
Subject key identifier:   B6:21:BD:F6:E7:3E:99:C1:90:39:6F:53:B6:14:B5:0D:4D:51:D5:73
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer:       /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial:       44B1CD4D0628ECE0DA0DAE3BB43DD0F840355692
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number:          019F
Signing time:             Thu 08 May 2025 17:41:02 +0000
Manifest this update:     Thu 08 May 2025 17:36:02 +0000
Manifest next update:     Sun 11 May 2025 18:22:02 +0000
Files and hashes:         1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: BeLsfpL8RzgYNWSnNvLFv9eVxbvW50/eid911Xh0OPs=)
                          2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: b8xR1UFGhI8JRC8jGq5C5a2Nz1JzJ6vbfxX+u2+Kfvg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
                          rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 18:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b1:cd:4d:06:28:ec:e0:da:0d:ae:3b:b4:3d:d0:f8:40:35:56:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
        Validity
            Not Before: May  8 17:36:02 2025 GMT
            Not After : May 11 18:22:02 2025 GMT
        Subject: CN=B621BDF6E73E99C190396F53B614B50D4D51D573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:c9:4c:60:28:6a:53:8f:eb:bc:a4:d7:8e:
                    b1:bb:8e:f4:27:89:99:4f:38:70:b6:fb:dd:35:3f:
                    d7:87:fd:8b:06:14:d2:b5:6c:58:d2:92:4b:95:87:
                    6c:59:8c:7d:62:81:86:25:12:33:2a:ff:31:b4:34:
                    55:71:ea:80:33:5a:2e:45:23:d6:91:6e:7a:32:1e:
                    a4:8f:3a:c7:07:52:0e:6f:29:41:0f:b9:d3:c9:33:
                    b1:14:dc:51:97:31:3b:1c:6a:ba:b1:dd:16:00:60:
                    ca:f1:b8:bc:9e:92:4e:31:fe:9b:7c:22:7e:1c:4c:
                    b9:89:62:f9:a9:f7:c5:62:cc:b0:37:c9:56:98:07:
                    c8:41:aa:a3:bc:ba:9c:99:f8:c2:ba:39:20:89:3a:
                    7c:2b:3f:1c:41:ce:a6:03:dc:08:7d:c8:c8:92:9d:
                    66:e6:7f:ed:6e:1a:26:9a:5b:cb:27:e0:e0:10:52:
                    49:1e:76:ee:3f:0e:9e:29:ca:98:ff:d6:9c:4c:30:
                    f9:62:25:12:07:c2:f4:a6:15:e4:3a:2f:43:5c:75:
                    0d:6d:0f:a0:9c:8c:c1:2a:f8:f8:c9:b8:9e:ab:7b:
                    ec:b4:0a:3d:b9:2d:3a:80:d3:4d:b1:24:47:9e:9f:
                    d1:29:a0:3a:dc:3b:0d:03:41:61:ca:76:db:ec:34:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:21:BD:F6:E7:3E:99:C1:90:39:6F:53:B6:14:B5:0D:4D:51:D5:73
            X509v3 Authority Key Identifier:
                keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:41:35:a9:8a:8d:1a:e3:4d:6d:db:85:db:a5:2f:77:7d:0f:
         81:51:fb:e1:4b:6f:54:27:99:33:bc:bf:31:a4:74:34:2c:eb:
         9e:99:e9:28:be:ab:a5:87:94:90:f1:35:d6:e4:46:07:7d:05:
         59:21:14:b2:59:63:77:fc:70:39:5c:40:ed:8e:e2:aa:8b:5a:
         4d:23:a7:d1:b5:6d:18:75:e7:76:79:c0:21:21:84:74:97:63:
         5d:71:98:a7:06:65:b1:eb:13:2c:a6:bf:4d:c1:7d:a9:fe:20:
         34:bf:ca:7f:19:ee:64:f2:7f:7a:b0:81:9c:24:96:87:c6:cc:
         2b:9f:48:96:0e:16:4f:9d:a5:d2:d8:12:9d:e8:f7:42:6d:6a:
         f6:42:1b:a2:b6:f6:74:fa:58:36:6b:9f:81:6b:ca:32:36:86:
         8e:92:49:76:ec:29:79:47:eb:41:6b:37:2c:e7:93:b7:3f:31:
         0d:a6:43:3a:21:b5:0b:c3:a1:06:92:42:b0:17:aa:22:ad:8f:
         47:9d:14:65:0b:4c:63:86:dd:27:bf:1a:33:63:56:38:81:ee:
         e9:e8:00:39:0f:2f:61:72:41:e6:0d:72:55:dc:a1:ec:81:07:
         03:05:fe:89:36:be:8d:6b:59:c0:b6:19:22:05:62:4a:c6:55:
         d5:30:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:25:30 2025 by rpki-client